axios incident

The axios incident tag covers the social engineering supply-chain attack that compromised the Axios HTTP client library. Discussions focus on how the maintainer's account was taken over via social engineering, leading to malicious packages being published on npm. The attack is attributed to the North Korea-linked UNC1069 cluster, indicating a financially motivated campaign targeting software developers and crypto-adjacent victims. This incident highlights supply-chain risks stemming from human error rather than technical exploits, and serves as a case study in JavaScript ecosystem security.